Chainsaw

A fast forensic triage tool for detecting suspicious Windows event log activity using rule based threat hunting

Chainsaw is an open source DFIR and threat hunting tool developed by Florian Roth that focuses on rapid analysis of Windows Event Logs. It enables defenders to quickly identify malicious behavior, at…